CQ5.3 with CRX 2.1 (and Hotfix 2.1.0.4 installed) for use with Active Directory

Active Directory setup with Group and User synchronization to use with CQ5.3/CRX2.1 with CRX hotfix 2.1.0.4 installed. To disallow group synchronization, set the groupRoot property to an empty, existing OU.